Privacy Policy

1. Data controller

Adora Ink Tattoo.

2. Data we collect

Name, email address, phone number and shipping address when you place an order or a session request. A health declaration, if you provide one, is treated as special category data and kept only for as long as it is needed for your safety during the session.

3. Purpose and legal basis

Managing bookings and orders (performance of a contract), meeting tax and health obligations (legal obligation), and answering your enquiries (legitimate interest).

4. Retention

Order data is kept for the statutory accounting retention period. Session requests that do not proceed are deleted after 12 months.

5. Processors

Hosting provider and transactional email provider. We do not sell or share your data for advertising purposes.

6. Your rights

You may request access, rectification, erasure, restriction, portability and objection by writing to the contact address. You may also lodge a complaint with the Spanish Data Protection Agency.

7. Security

Passwords are stored with Argon2id. Sessions are stored hashed and connections use TLS.